General

  • Target

    c867bf97cfbe1cd0ed5bd46d2c4dda1e450007b31a126b5aa7ac841be946960cN.exe

  • Size

    58KB

  • Sample

    241118-wcvvna1gna

  • MD5

    3b789e2a298f40b417b9bb351fdfce40

  • SHA1

    17925ce0a373d7d8bacb68641e29bbaa37c7e0ba

  • SHA256

    c867bf97cfbe1cd0ed5bd46d2c4dda1e450007b31a126b5aa7ac841be946960c

  • SHA512

    c7e2ce2a6d1f46d5a6d5d664bbc583b458ba2f8cb3ea97e5ba193eace50ce8bf266973c795f5ebd692f17f9bf393b194a50a5f3a9aaefaf11d2edbb5034ef29a

  • SSDEEP

    1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1lg:amZ+luXwy2f9LDhDlg

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      c867bf97cfbe1cd0ed5bd46d2c4dda1e450007b31a126b5aa7ac841be946960cN.exe

    • Size

      58KB

    • MD5

      3b789e2a298f40b417b9bb351fdfce40

    • SHA1

      17925ce0a373d7d8bacb68641e29bbaa37c7e0ba

    • SHA256

      c867bf97cfbe1cd0ed5bd46d2c4dda1e450007b31a126b5aa7ac841be946960c

    • SHA512

      c7e2ce2a6d1f46d5a6d5d664bbc583b458ba2f8cb3ea97e5ba193eace50ce8bf266973c795f5ebd692f17f9bf393b194a50a5f3a9aaefaf11d2edbb5034ef29a

    • SSDEEP

      1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1lg:amZ+luXwy2f9LDhDlg

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks